Re: [users@httpd] balancing best practices - mod_proxy_balancer

2018-03-06 Thread Galen Johnson
Not sure if this is still the case, but I don't believe that mod_jk allows SSL connections between Apache and Tomcat. This is why mod_proxy_httpd is often used. If that bit of security is important to your organization, something to keep in mind. If this is not the case for mod_jk, I would love

Re: [users@httpd] Assistance with file + ldap auth config moving from httpd 2.2 to 2.4

2017-10-13 Thread Galen Johnson
Eduardo, It looks like you're trying to get it working with Xymon so you might want to ask on that list as well. I had a heck of a time getting it to work but I ended up using mod_authnz_external.c to configure it to use PAM. This is the config I use: # Require SSL connection for p

[users@httpd] mod_authz_core and http response 451

2017-09-05 Thread Galen Johnson
Hello, I've googled a bit and I can't find a way to handle this without using a rewrite rule. I'm setting up a rule using mod_geoip to block embargoed countries. I set up the config as follows: # Blocking a client based on country SetEnvIf GEOIP_COUNTRY_CODE CU BlockCountry